Channels
doorman
zercurity
infrastructure
code-review
queryhub
apple-silicon
carving
goquery
aws
querycon
golang
file-carving
fuzzing
help-proxy
darkbytes
process-auditing
general
windows
random
fleet-dev
tls
fim
awallaby
zentral
zeek
auditing-warroom
linen-dev
fleetosquery
plugins
jobs
arm-architecture
uptycs
android_tests
selfgroup
vendor-feeds
fleet
eclecticiq-polylogyx-extension
ebpf
website
core
macos
kolide
osctrl
extensions
foundation
sql
officehours
linux
community-feeds
Powered by
#fleet
Title
# fleet
o
oneiroi
10/11/2022, 12:03 PM
From another perspective, this could be useful in DFIR cases, to target response "packs" at only the systems in scope of the incident being investigated.
j
Jason
10/12/2022, 1:54 AM
Perhaps you could use labels for this ?
Post